Re: NFS exporting
Mike Evans (mre@primus.com)
Wed, 13 Apr 1994 13:21:33 -0700 (PDT)
On Wed, 13 Apr 1994, Perry E. Metzger wrote:
> As for NFS in general, its useless. As soon as you export an NFS
> partition to the net (at least if you export it writable), you can
> kiss your machine goodbye. Among other nasty tricks, even without the
> mountd giving you any informaiton on the host you can just flood the
> machine with unlink requests or guess inode generation numbers or
> other such things. NFS is a hunk of junk.
You can block NFS (2049) at the router. But that doesn't stop
internal ways of getting root on machines running NFS / breaking into
machines from the internal network.
Mike